React

a game in which two players alternately put crosses and circles in one of the compartments of a square grid of nine spaces.

１、Play tic-tac-toe
２、Displayed when finalized
３、History is saved as the game progresses
４、Review the start history and refer to the previous state of the board

Tutorial: Intro to React

This project was bootstrapped with Create React App.

In the project directory, you can run:

Runs the app in the development mode.
Open http://localhost:3000 to view it in the browser.

The page will reload if you make edits.
You will also see any lint errors in the console.

Launches the test runner in the interactive watch mode.
See the section about running tests for more information.

Builds the app for production to the build folder.
It correctly bundles React in production mode and optimizes the build for the best performance.

The build is minified and the filenames include the hashes.
Your app is ready to be deployed!

See the section about deployment for more information.

Note: this is a one-way operation. Once you eject, you can’t go back!

If you aren’t satisfied with the build tool and configuration choices, you can eject at any time. This command will remove the single build dependency from your project.

Instead, it will copy all the configuration files and the transitive dependencies (Webpack, Babel, ESLint, etc) right into your project so you have full control over them. All of the commands except eject will still work, but they will point to the copied scripts so you can tweak them. At this point you’re on your own.

You don’t have to ever use eject. The curated feature set is suitable for small and middle deployments, and you shouldn’t feel obligated to use this feature. However we understand that this tool wouldn’t be useful if you couldn’t customize it when you are ready for it.

You can learn more in the Create React App documentation.

To learn React, check out the React documentation.

This section has moved here: https://facebook.github.io/create-react-app/docs/code-splitting

This section has moved here: https://facebook.github.io/create-react-app/docs/analyzing-the-bundle-size

This section has moved here: https://facebook.github.io/create-react-app/docs/making-a-progressive-web-app

This section has moved here: https://facebook.github.io/create-react-app/docs/advanced-configuration

This section has moved here: https://facebook.github.io/create-react-app/docs/deployment

This section has moved here: https://facebook.github.io/create-react-app/docs/troubleshooting#npm-run-build-fails-to-minify

This repository provides the official Tensorflow 2 implimentation of the illuminant estimation algorithm BoCF proposed in paper Bag of Color Features For Color Constancy accepted in IEEE Transactions on Image Processing (TIP) using INTEL-TAU dataset.

In this paper, we propose a novel color constancy approach, called BoCF, building upon Bag-of-Features pooling. The proposed method substantially reduces the number of parameters needed for illumination estimation. At the same time, the proposed method is consistent with the color constancy assumption stating that global spatial information is not relevant for illumination estimation and local information (edges, etc.) is sufficient. Furthermore, BoCF is consistent with color constancy statistical approaches and can be interpreted as a learning-based generalization of many statistical approaches.

BoCF consists of three main blocks: feature extraction block, Bag of Features block, and an estimation block. In the first block, regular convolutional layers are used to extract relevant features. Inspired by the assumption that second order gradient information is sufficient to extract the illumination information, we use only two convolutional layers to extract the features. In the second block, i.e., the Bag of Features block, the network learns the dictionary over the non-linear transformation provided by the first block. This block outputs a histogram representation, which is fed to the last component, i.e., the estimation block, to regress to the scene illumination.

To further improve the illumination estimation accuracy, we propose a novel attention mechanism for the BoCF model with two variants based on self-attention. In the first variant (Attention1), we add an attention mechanism between the feature extraction block and the Bag of Features block. This mechanism allows the network to dynamically select parts of the image to use for estimating the illumination, while discarding the remaining parts. Thus, the network becomes robust to noise and irrelevant features. In the second variant (Attention2), we add an attention mechanism on top of the histogram representation, i.e., between the Bag of Features block and the estimation block. In this way, we allow the network to learn to adaptively select the elements of the histogram which best encode the illuminant information. The model looks over the whole histogram after the spatial information has been discarded and generates a proper representation according the current context (histogram).

INTEL-TAU dataset is the largest publicly available illumination estimation dataset. It is composed of 7022 scenes in total. The variety of scenes captured using three different camera models, i.e., Canon 5DSR, Nikon D810, and Sony IMX135, makes the dataset appropriate for evaluating the camera and scene invariance of the different illumination estimation techniques.

The project was tested in Python 3. Run pip install -r requirements.txt to install dependent packages.

1/ Download the preprossed 1080p TIFF variant of the dataset.

2/ Set the root path variable in main_BoCF.py to your data path, e.g., ‘root_path’: ‘/mnt/Data/Firas2/Intel_v3/processed_1080p’

3/ Run the script main_BoCF.py : python3 main_BoCF.py

1/ First a dataset class is created using the paramters

inteltau = INTEL_TAU_DATASET(**dataset_params)
inteltau.set_subsets_splits()

2/ For each fold, we generate the split using the configuration file:

partition,ground_truths = inteltau.get_train__test_10folds(fold)            

3/ We augment the training and validation data relative to the current fold and save the augmented dataset relative to the fild in the aug_path. Note1: This step is only excuted in case the augmented dataset folder does not exist. Note2: Don’t stop the code in the middle of this step. In case the code was stopped before this step is finished, the aug_path folder needs to be deleted manually.

augment_data(15*len(partition['train']),partition['train'],ground_truths['train'],(227,227),train_dir)    
augment_data(5*len(partition['validation']),partition['validation'],ground_truths['validation'],(227,227),val_dir)  

4/ We create a BoCF model. There are two hyper-parameters: histogram_size (default=150) and attention_variant (default=2). If attention_variant needs to be changed to 1 to use attention1 variant or 0 to test the standard approach without attention.

 model = BoCF(n_codewords = hist_size , show_summary= True,attention =attention_variant) 

5/ Training the model and testing it using the test set

 history = model.fit_generator(generator=training_generator, epochs=EPOCHS,
                        validation_data=validation_generator,
                        steps_per_epoch = (len(partition['train']) // train_params['batch_size']) ,                    
                        use_multiprocessing=True, 
                        callbacks =all_callbacks( path + '.hdf5' ),
                        workers=4)
 test_model(model,partition['test'],ground_truths['test'],method,path,result_path)

The numirical results of the different approaches on INTEL-TAU datasets. We report the different statistics of the Recovery and Reproduction errors using the 10-fold cross validation protocol.

We also provide some visual results of BoCF on three samples from INTEL-TAU. From left to right, the input image, the corrected images with BoCF method, and the ground truth image.

@article{laakom2020bag,
  title={Bag of color features for color constancy},
  author={Laakom, Firas and Passalis, Nikolaos and Raitoharju, Jenni and Nikkanen, Jarno and Tefas, Anastasios and Iosifidis, Alexandros and Gabbouj, Moncef},
  journal={IEEE Transactions on Image Processing},
  volume={29},
  pages={7722--7734},
  year={2020},
  publisher={IEEE}
}

@article{laakom2021intel,
  title={Intel-tau: A color constancy dataset},
  author={Laakom, Firas and Raitoharju, Jenni and Nikkanen, Jarno and Iosifidis, Alexandros and Gabbouj, Moncef},
  journal={IEEE Access},
  volume={9},
  pages={39560--39567},
  year={2021},
  publisher={IEEE}
}

Note: This repository contains the course microservice of the Sumé LMS. If you are looking for more information about the application, we strongly recommend you to check the documentation.

Sumé LMS is a modern and open-source learning management system that uses modern technologies to deliver performance and scalability to your learning environment.

• Compatible with SCORM and xAPI (TinCan)
• Flexible and modular
• Open-source and Free
• Fast and modern
• Easy to install and run
• Designed for microservices
• REST API based application
• and more.

• Prerequisites
• Prepare
• Building
• Running
• Configuring
• Testing
• Documentation
• Contributing
• Code of Conduct
• Contributors
• Support
• License

• Go >= 1.21
• PostgreSQL >= 16.0

Clone the repository

$ git clone git@github.com:sumelms/microservice-course.git

Access the project folder, and download the Go dependencies

$ go get ./...

It may take a while to download all the dependencies, then you are ready to build.

There are two ways that you can use to build this microservice. The first one will build it using your own machine, while the second one will build it using a container runtime. Also, you can build the container image to use it with Docker or Podman, but it is up to you.

Here are the following instructions for each available option:

It should be pretty simple, once all the dependencies are download just run the following command:

$ make build

It will generate an executable file at the /bin directory inside the project folder, and probably you want to know how to run it.

At this point, I’ll assume that you have installed and configure the container runtime (Docker or Podman) in your system.

$ make container-build

If everything works, you can now run the microservice using the container image.

You can have your local database running the following command:

$ docker-compose up -d postgres

And then you could run the migrations using

$ make migration-up

Note You will have to install the golang-migrate tool It uses the same environment variables from the configuration section.

OK! Now you build it you need to run the microservice. That should also be pretty easy.

If you want to run the microservice locally, you may need to have a Postgres instance running and accessible from your machine, and you may need to first configure it. Then you can run it, you just need to execute the following command:

$ make run

Once it is running you can test it: http://localhost:8080/health

If you want to run the microservice using a container runtime, the easiest way to do it is using the docker-composer or podman-compose.

All that you need to do is, execute the command:

$ make compose-up

It should create 2 containers, one that runs the microservice and another that runs the Postgres. If you already have your own Postgres instance you can only run the microservice container:

$ make container-run

Keep in mind that, in both cases, it will load the config/config.yml file from the project. If you want to change some configurations you can set the environment variables in your docker-compose.yml file, or edit the configuration file.

Once you have the IP address you can now access the endpoint: http://localhost:8080/health

You can easily configure the application editing the config/config.yml file or using environment variables. We do strongly recommend that you use the configuration file instead of the environment variables. Again, it is up to you to decide. If you want to use the variables, be sure to prefix it all with SUMELMS_.

The list of the environment variables and it’s default values:

SUMELMS_SERVER_HTTP_PORT = 8080
SUMELMS_DATABASE_DRIVER = postgres
SUMELMS_DATABASE_HOST = localhost
SUMELMS_DATABASE_PORT = 5432
SUMELMS_DATABASE_USER = postgres
SUMELMS_DATABASE_PASSWORD = password
SUMELMS_DATABASE_DATABASE = sumelms_course

We are using configuro to manage the configuration, so the precedence order to configuration is: Environment variables > .env > Config File > Value set in Struct before loading.

You can run all the tests with one single command:

$ make test

The complete Sumé LMS documentation can be found in our official website.

This project uses Swagger to generate the API documentation and API mockup, the files can be found swagger directory.

Sometimes, a microservice can cover more than one domain boundary, in this case, the API scheme should be stored in the same directory indicated above, but following the following filename convention: <domain-name>-api.yaml

The best way to edit the API scheme is by using the Swagger Editor.

Thank you for considering contributing to the project. In order to ensure that the Sumé LMS community is welcome to all make sure to read our Contributor Guideline.

Would you like to contribute and participate in our communities? Please read our Code of Conduct.

Made with contrib.rocks.

You can reach us or get community support in our Discord server. This is the best way to find help and get in touch with the community.

If you found a bug or have a feature request, the best way to do it is opening an issue.

This project licensed by the Apache License 2.0. For more information check the LICENSE file.

An easy way to get Social Networks authenticating by OAuth 2.0 on Objective-C via UIWebView

Create NSObject class import "OAuthConfigurator.h" and implement OAuthConfigurator protocol:

@implementation Configurator

#pragma mark OAuthConfigurator methods

- (NSURL *)redirectURI
{
    return [NSURL URLWithString:@"http://localhost"];
}

- (NSString *)facebookApplicationID
{
    return @"APPLICATION_ID";
}

- (NSString *)facebookScope
{
    return @"SCOPE";
}

...

Create OAuthController and set to constructor Social OAuth object from SocialOAuthFactory:

- (void)presentOAuthWithOAuthType:(OAuthType)type
{
    SocialOAuthFactory *socialOAuthFactory = [[SocialOAuthFactory alloc] initWithConfigurator:[Configurator new]];
    OAuthController *oauthController = [[OAuthController alloc] initWithSocialOAuth:[socialOAuthFactory OAuthByType:type]];

    oauthController.completionBlock = ^(NSDictionary *response, NSString *errorString, __weak UIViewController *weakOAuthController)
    {
        if(!errorString)
        {
            // create OAuthCredential from response and save to Keychain or something else
        }
        else
        {
            [[[UIAlertView alloc] initWithTitle:NSLocalizedString(@"Authorization Error", nil) message:errorString delegate:nil cancelButtonTitle:NSLocalizedString(@"OK", nil) otherButtonTitles:nil] show];
        }

        [weakOAuthController.navigationController dismissViewControllerAnimated:YES completion:nil];
    };
    oauthController.onCancelButtonTap = ^(__weak UIViewController *weakOAuthController)
    {
        [weakOAuthController.navigationController dismissViewControllerAnimated:YES completion:nil];
    };

    [self presentViewController:[[UINavigationController alloc] initWithRootViewController:oauthController] animated:YES completion:nil];
}

Create OAuthCredential from completion block response via OAuthManager:

OAuthCredential *credential = [[OAuthManager manager] credentialByResponse:response];

OAuthCredential supporting NSCoding protocol, you can save OAuthCredential object to Keychain, NSUserDefault and etc.

Create Social Network class subclass of SocialOAuth and override constructor:

@implementation YandexOAuth

#pragma mark Interface methods

+ (instancetype)OAuth
{
    return [[YandexOAuth alloc] initWithBaseURL:@"https://oauth.yandex.ru/" authPath:@"authorize" clientID:@"CLIEND_ID" clientSecret:@"CLIENT_SECRET" responseType:@"token" redirectURI:[NSURL URLWithString:@"http://localhost"] scope:@"SCOPE"];
}

Also you can create class subclass of OAuthAppearance:

@implementation YanexAppearance

#pragma mark NSObject methods

- (instancetype)init
{
    self = [super init];
    if(self)
    {
        self.title = NSLocalizedString(@"Яндекс", nil);

        NSMutableAttributedString *attributedString = [[NSMutableAttributedString alloc] initWithString:self.title];

        [attributedString addAttribute:NSForegroundColorAttributeName value:[UIColor redColor] range:NSMakeRange(0, 1)];
        [attributedString addAttribute:NSFontAttributeName value:[UIFont systemFontOfSize:20.0f] range:NSMakeRange(0, self.title.length)];

        self.attributedString = attributedString;
        self.tintColor = [UIColor blackColor];
        self.mainColor = [UIColor colorWithRed:1.00 green:1.00 blue:1.00 alpha:1.00];
        self.backgroundColor = [UIColor colorWithRed:0.96 green:0.96 blue:0.95 alpha:1.00];

        self.statusBarStyle = UIStatusBarStyleDefault;
    }
    return self;
}

And set to Social OAuth (override main constructor):

- (instancetype)initWithBaseURL:(NSString *)baseURL authPath:(NSString *)authPath clientID:(NSString *)clientID clientSecret:(NSString *)clientSecret responseType:(NSString *)responseType redirectURI:(NSURL *)redirectURI scope:(NSString *)scope
{
    self = [super initWithBaseURL:baseURL authPath:authPath clientID:clientID clientSecret:clientSecret responseType:responseType redirectURI:redirectURI scope:scope];
    if(self)
    {
        self.appearance = [YanexAppearance appearance];
    }
    return self;
}

Create YanexAppearance and set to OAuthController:

OAuthController *oauthController = [[OAuthController alloc] initWithSocialOAuth:[YanexAppearance OAuth]];

oauthController.onCancelButtonTap = ^(__weak UIViewController *weakOAuthController)
{
	// dismiss
};
    oauthController.completionBlock = ^(CATOAuthCredential *credential, NSString *errorString, __weak UIViewController *weakOAuthController)
{
	// dismiss and process credential (save to user defaults or something else)
};
[self presentViewController:[[UINavigationController alloc] initWithRootViewController:oauthController] animated:YES completion:nil];

• Support SFSafariViewController. But some social networks don’t support callback like myapp://callback;
• Support OAuth 1.0 for Twitter and etc;
• Tests, correct serialize response data;
• Support TV_OS;
• Renew Access token;
• More social networks : ) ;
• Any ideas ?

• Website: Orangesoft
• Email: hello@orangesoft.co

The repo provides a set of tools for creating PyTorch Geometric (PyG) data objects from AnnData objects, which are commonly used for storing and manipulating single-cell genomics data. In addition, the repo includes functionality for creating PyTorch Lightning (PyTorch-Lightning) DataModule objects from the PyG data objects, which can be used to create graph neural network (GNN) data pipelines. The PyG data objects represent graphs, where the nodes represent cells and the edges represent relationships between the cells, and can be used to perform GNN tasks such as node classification, graph classification, and link prediction. The repo is written in Python and utilizes the PyTorch, PyTorch Geometric, and PyTorch-Lightning libraries.

Please refer to the documentation. In particular, the

• API documentation.

You need to have Python 3.9 or newer installed on your system. If you don’t have Python installed, we recommend installing Mambaforge.

There are several alternative options to install geome:

1. Install the latest development version:

Without GPU support:

mamba create -n geome  python=3.10
mamba activate geome
pip install torch==2.1.0
pip install torch-scatter torch-sparse torch-cluster
pip install git+https://github.com/theislab/geome.git@main

With GPU:

mamba create -n geome  python=3.10
mamba activate geome
mamba install pytorch==2.1.0 torchvision==0.16.0 torchaudio==2.1.0 pytorch-cuda=12.1 -c pytorch -c nvidia
pip install torch-scatter torch-sparse torch-cluster -f https://data.pyg.org/whl/torch-2.1.0+cu121.html
pip install git+https://github.com/theislab/geome.git@main

See the changelog.

For questions and help requests, you can reach out in the scverse discourse. If you found a bug, please use the issue tracker.

Some of the data for DatasetHartmann is distributed in this package. It was originally retrieved from: https://zenodo.org/record/3951613#.Y9flQS-B1qv

This project was generated from @cjolowicz‘s Hypermodern Python Cookiecutter template.

t.b.a

Español

Alioli is a food app that aims to centralize different recipe and product functionalities in one place.

Built with Flutter and Firebase, it includes the use of design patterns, NoSQL and SQLite databases, and integration with external APIs.

Download by clicking on the following image:

With Alioli you can:

• 🛒 Organize your pantry food list, as well as your shopping list.
• 📅 Receive notifications when your products are close to their expiration date.
• 🔍 Scan the barcode of the products to get a summary of their nutritional information.
• 🥕 Search for recipes based on the foods in your pantry, among other search criteria such as recipe name or category to which they belong.
• 🔧 Apply a multitude of filters to searches, classifying them by vegan, vegetarian, preparation time, best rating or existence of videos among other filters.
• 📚 Create your own personalized recipe lists.
• ⬆️ Upload your own recipes to the platform so that they can be accessible by everyone.

Alioli es una aplicación sobre alimentación que trata de centralizar distintas funcionalidades sobre recetas y productos en un solo lugar.

Realizada con Flutter y Firebase, incluye el uso de patrones de diseño, bases de datos NoSQL y SQLite e integración con apis externas.

Descargar haciendo click sobre la siguiente imagen:

Con Alioli puedes:

• 🛒 Organizar tu lista de alimentos en despensa, así como tu lista de la compra.
• 📅 Recibir notificaciones cuando tus productos estén próximos a su fecha de caducidad.
• 🔍 Escanear el código de barras de los productos para obtener un resumen de su información nutricional.
• 🥕 Buscar recetas basadas en los alimentos de tu despensa, entre otros criterios de búsqueda como nombre de la receta o categoría a la que pertenecen.
• 🔧 Aplicar multitud de filtros a las búsquedas, clasificándolas por veganas, vegetarianas, tiempo de preparación, mejor valoración o existencia de vídeos entre otros filtros.
• 📚 Crear tus propias listas de recetas personalizadas.
• ⬆️ Subir tus propias recetas a la plataforma para que puedan ser accesibles por todo el mundo.

• PHISHING TOOLS
• OSINT
• Awesome List
• APTS
• SSRF
• Reverse Engineering
• MALWARE
• Machine Learning
• MALWARE SAMPLES
• CHEATSHEETS
• Machine learning & hacking
• SCANNERS
• Kali Linux
• Linux Guide
• Fuzzing
• PowerShell
• Vulnerable VMs
• Bug Bounty
• WEB
• NEWS SITES
• BLUE-TEAM
• XSS
• SQL Injection
• CSRF
• Google Hacking
• Python
• Ruby
• Honey Pots
• CTF
• CTF Tools
• Cryptocurrency
• Tor
• Deep Learning
• Threat Maps
• Encryption
• Red Team
• Networking
• random-reports
• Interview-cheatsheets
• Search Engines
• Bash
• Html-Smuggling
• Core
• FTP
• ravencoin
• ssrf
• Bash
• Mysql
• VMs

• https://manjaro.site/how-to-enable-full-screen-mode-on-ubuntu-19-10-on-vmware-workstation-15-5/

• https://www.digitalocean.com/community/tutorials/how-to-install-mysql-on-ubuntu-20-04
• https://codingsight.com/top-5-mysql-create-table-syntax-for-t-sql-developers
• https://www.digitalocean.com/community/tutorials/how-to-create-a-new-user-and-grant-permissions-in-mysql

• https://stackoverflow.com/questions/18568706/check-number-of-arguments-passed-to-a-bash-script
• https://linuxize.com/post/bash-functions
• https://devhints.io/bash
• https://www.cyberciti.biz/faq/unix-howto-read-line-by-line-from-file
• https://stackoverflow.com/questions/918886/how-do-i-split-a-string-on-a-delimiter-in-bash
• https://www.journaldev.com/41511/execute-command-shell-script
• https://kapeli.com/cheat_sheets/Bash_Test_Operators.docset/Contents/Resources/Documents/index
• https://www.shellcheck.net

• https://www.vaadata.com/blog/exploiting-the-ssrf-vulnerability

• https://tronblack.medium.com/ravencoin-tags-and-restricted-assets-84fe3070a226
• https://tronblack.medium.com/ravencoin-a-securities-token-roadmap-47ae1d9dac26
• https://github.com/RavenProject/Ravencoin/tree/master/roadmap/rewards

• https://serverfault.com/questions/450651/500-illegal-port-command-using-command-line-ftp
• https://tecadmin.net/download-upload-files-using-ftp-command-line/
• https://docs.microsoft.com/en-us/iis/configuration/system.applicationhost/sites/site/ftpserver/security/authentication/anonymousauthentication
• https://kb.iu.edu/d/aenq
• https://book.hacktricks.xyz/pentesting/pentesting-ftp
• https://steflan-security.com/ftp-enumeration-guide

• https://labs.sentinelone.com/thundercats-hack-the-fsb-your-taxes-didnt-pay-for-this-op
• https://www.guardicore.com/labs/the-nansh0u-campaign-hackers-arsenal-grows-stronger
• https://graphika.com/reports/posing-as-patriots
• https://blogs.jpcert.or.jp/en/2021/06/php_malware.html
• https://www.vice.com/en/article/epnv8z/nypds-sprawling-facial-recognition-system-now-has-more-than-15000-cameras
• https://blog.heckel.io/2013/07/01/how-to-use-mitmproxy-to-read-and-modify-https-traffic-of-your-phone
• https://cluster25.io/2021/06/03/a-not-so-fancy-game-apt28-skinnyboy
• https://www.proofpoint.com/us/blog/threat-insight/badblood-ta453-targets-us-and-israeli-medical-research-personnel-credential
• https://threatpost.com/tools-used-by-lamberts-apt-found-in-vault-7-dumps/124900
• https://www.proofpoint.com/us/blog/threat-insight/new-variant-buer-loader-written-rust
• https://hackaday.com/2017/04/26/hack-your-own-samsung-tv-with-the-cias-weeping-angel-exploit
• https://www.uptycs.com/blog/discovery-of-simps-botnet-leads-ties-to-keksec-group
• https://www.pentestpartners.com/security-blog/getting-a-persistent-shell-on-a-747-ife
• https://news.sophos.com/en-us/2021/06/11/relentless-revil-revealed
• https://www.vice.com/en/article/7kvkqb/how-ea-games-was-hacked-slack
• https://www.rtcsec.com/post/2021/06/abusing-sip-for-cross-site-scripting-most-definitely
• https://labs.sentinelone.com/thundercats-hack-the-fsb-your-taxes-didnt-pay-for-this-op

• https://github.com/nickcapurso/CORE-Worm-Keylogger-CSCI-6531
• https://www.nrl.navy.mil/Our-Work/Areas-of-Research/Information-Technology/NCS/CORE
• https://github.com/coreemu/core
• https://github.com/peppelinux/Common-Open-Research-Emulator-CORE-Tutorials
• http://coreemu.github.io/core

• https://blog.assetnote.io/2021/03/18/h2c-smuggling
• https://github.com/BishopFox/h2csmuggler
• https://infosecwriteups.com/behind-the-scene-http-parameter-pollution-534b4fa2449c

• https://chaah.awankloud.my/redteaming-tips-creating-a-hidden-user

• https://github.com/delvelabs/batea
• https://github.com/PacktPublishing/Hands-On-Artificial-Intelligence-for-Cybersecurity
• https://apps.dtic.mil/dtic/tr/fulltext/u2/a618584.pdf – Automated Cyber Red Teaming – Cyber and Electronic Warfare Division – defence Science and Technology Organisation
• https://github.com/gyoisamurai/GyoiThon
• https://github.com/Kayzaks/HackingNeuralNetworks
• http://taochen.github.io/publications/papers/issta20.pdf

• https://www.mcafee.com/blogs/other-blogs/mcafee-labs/server-side-request-forgery-takes-advantage-vulnerable-app-servers

• https://opensource.com/article/17/4/build-your-own-name-server
• https://www.digitalocean.com/community/tutorials/how-to-configure-bind-as-a-private-network-dns-server-on-ubuntu-18-04
• https://ubuntu.com/server/docs/service-domain-name-service-dns

• https://www.digitalocean.com/community/tutorials/initial-setup-of-a-fedora-21-server
• https://manjaro.site/linux-ultimate-guide/fedora-tutorial
• https://www.tecmint.com/things-to-do-after-fedora-26-installation
• https://fedora.fandom.com/wiki/Basic_Commands

• https://github.com/igorbarinov/awesome-bitcoin
• https://apsdehal.in/awesome-ctf
• https://www.github.com/josephmisiti/awesome-machine-learning
• https://www.github.com/alebcay/awesome-shell
• https://www.github.com/k4m4/movies-for-hackers
• https://www.github.com/keon/awesome-nlp
• https://www.github.com/kjw0612/awesome-rnn
• https://www.github.com/tayllan/awesome-algorithms
• https://www.github.com/carpedm20/awesome-hacking
• https://www.github.com/thibmaek/awesome-raspberry-pi
• https://www.github.com/coinpride/CryptoList
• https://www.github.com/ritchieng/the-incredible-pytorch
• https://www.github.com/meirwah/awesome-incident-response
• https://www.github.com/onlurking/awesome-infosec
• https://www.github.com/secfigo/Awesome-Fuzzing
• https://github.com/jklepatch/awesome-monero
• https://github.com/decalage2/awesome-security-hardening
• https://github.com/fabacab/awesome-lockpicking
• https://github.com/DopplerHQ/awesome-interview-questions
• https://github.com/fffaraz/awesome-cpp
• https://github.com/luong-komorebi/Awesome-Linux-Software
• https://github.com/enaqx/awesome-pentest
• https://github.com/keon/awesome-nlp
• https://github.com/n1trux/awesome-sysadmin
• https://github.com/qazbnm456/awesome-web-security
• https://github.com/jivoi/awesome-ml-for-cybersecurity
• https://github.com/pluja/awesome-privacy
• https://github.com/0xInfection/Awesome-WAF
• https://github.com/sobolevn/awesome-cryptography
• https://github.com/fcambus/nginx-resources
• https://github.com/janikvonrotz/awesome-powershell
• https://github.com/Xel/Blockchain-stuff
• https://github.com/inputsh/awesome-c

• https://buckets.grayhatwarfare.com
• https://www.shodan.io
• https://censys.io
• https://ivre.rocks

• https://www.guru99.com/linux-interview-questions-answers.html
• https://github.com/DopplerHQ/awesome-interview-questions
• https://github.com/pbnj/infosec-interview-questions

• https://www.ired.team
• https://artkond.com/2017/03/23/pivoting-guide

• https://securethelogs.com/hacking-with-powershell-blue-team
• https://web.mit.edu/kerberos/
• https://wiki.sans.blue
• https://github.com/maldevel/blue-team
• https://www.sneakymonkey.net/2018/06/25/blue-team-tips
• https://devblogs.microsoft.com/powershell/powershell-the-blue-team
• https://github.com/tobor88/PowerShell-Blue-Team
• https://securethelogs.com/hacking-with-powershell-blue-team
• https://www.blackhillsinfosec.com/powershell-logging-blue-team/

• https://channel9.msdn.com/Series/Getting-Started-with-Microsoft-PowerShell
• https://docs.microsoft.com/en-us/powershell/scripting/overview?view=powershell-7
• https://www.comparitech.com/net-admin/powershell-cheat-sheet
• https://docs.microsoft.com/en-us/power-platform/admin/wp-task-automation-powershell
• https://www.guru99.com/powershell-tutorial.html
• https://securethelogs.com/hacking-with-powershell-blue-team

• https://github.com/cliffe/SecGen

• https://github.com/UticaCollegeCyberSecurityClub/LinuxGuide

• https://ourcodeworld.com/articles/read/961/how-to-solve-kali-linux-apt-get-install-e-unable-to-locate-package-checkinstall

• https://rhinosecuritylabs.com/research/fuzzing-left4dead-2-with-fuzzing-framework

• https://ma.ttias.be/socks-proxy-linux-ssh-bypass-content-filters
• https://unix.stackexchange.com/questions/46235/how-does-reverse-ssh-tunneling-work
• https://www.digitalocean.com/community/tutorials/how-to-set-up-ssh-keys–2
• https://www.debian.org/devel/passwordlessssh
• https://linuxhandbook.com/add-ssh-public-key-to-server/
• https://serverpilot.io/docs/how-to-use-ssh-public-key-authentication/

• https://deej-ai.online/
• https://deepdreamgenerator.com/
• https://github.com/arunponnusamy/object-detection-opencv
• https://github.com/curiousily/Deep-Learning-For-Hackers
• http://news.mit.edu/2017/explained-neural-networks-deep-learning-0414
• https://playground.tensorflow.org/
• https://towardsdatascience.com/understanding-neural-networks-19020b758230
• http://deeplearning.net/tutorial/gettingstarted.html
• https://github.com/ChristosChristofidis/awesome-deep-learning
• https://hackernoon.com/deep-learning-chatbot-everything-you-need-to-know-r11jm30bc
• https://medium.com/@ageitgey/deepfaking-the-news-with-nlp-and-transformer-models-5e057ebd697d
• https://towardsdatascience.com/cryptocurrency-price-prediction-using-deep-learning-70cfca50dd3a
• https://towardsdatascience.com/deep-learning-and-momentum-investing-2273e8db5b86
• https://towardsdatascience.com/machine-learning-for-sports-betting-not-a-basic-classification-problem-b42ae4900782
• https://towardsdatascience.com/creating-bitcoin-trading-bots-that-dont-lose-money-2e7165fb0b29
• https://towardsdatascience.com/detailed-tutorial-build-your-custom-real-time-object-detector-5ade1017fd2d
• https://medium.com/data-folks-indonesia/build-your-own-quotes-generator-3a23e9cbcff3
• https://hackernoon.com/dont-be-fooled-deceptive-cryptocurrency-price-predictions-using-deep-learning-bf27e4837151
• https://github.com/firmai/awesome-google-colab
• https://github.com/alpv95/MemeProject
• https://ai-mrkogao.github.io/reinforcement%20learning/pygta5/
• https://pytorch.org/tutorials/beginner/deep_learning_60min_blitz.html

• https://www.refirmlabs.com/reverse-engineering-my-routers-firmware-with-binwalk
• https://www.geeksforgeeks.org/working-with-magic-numbers-in-linux
• https://medium.com/@vignesh4303/reverse-engineering-resources-beginners-to-intermediate-guide-links-f64c207505ed
• https://hackaday.io/project/172292-introduction-to-reverse-engineering-with-ghidra
• https://towardsdatascience.com/building-a-quotebot-with-machine-learning-eca39272e3b7
• https://www.kitploit.com/2017/01/repy2exe-reverse-engineering-tool-for.html
• https://malwareunicorn.org/workshops/re101.html
• https://malwareanalysis.tools/
• https://medium.com/@vignesh4303/reverse-engineering-resources-beginners-to-intermediate-guide-links-f64c207505ed
• https://medium.com/free-code-camp/how-i-solved-a-simple-crackme-challenge-with-the-nsas-ghidra-d7e793c5acd2

• https://towardsdatascience.com/how-to-build-a-simple-song-recommender-296fcbc8c85
• https://github.com/PierreGe/RL-movie-recommender
• https://medium.com/analytics-vidhya/create-a-rapping-ai-using-deep-learning-part-1-collecting-the-data-634bbfa51ff5
• https://becominghuman.ai/how-netflix-uses-ai-and-machine-learning-a087614630fe
• https://github.com/josephmisiti/awesome-machine-learning
• https://aryamccarthy.github.io/malmi2016dopelearning
• https://towardsdatascience.com/introduction-to-neural-networks-advantages-and-applications-96851bd1a207
• https://genius.com/posts/63-Introducing-rapmetricstm-the-birth-of-statistical-analysis-of-rap-lyrics
• https://medium.com/swlh/build-spotify-playlist-using-machine-learning-45352975d2ee
• https://towardsdatascience.com/trolls-and-bots-are-disrupting-social-media-heres-how-ai-can-stop-them-d9b969336a06
• http://sitn.hms.harvard.edu/flash/2016/how-tay-machine-learned-her-way-to-become-a-twitter-troll/
• https://medium.com/@ageitgey/how-to-break-a-captcha-system-in-15-minutes-with-machine-learning-dbebb035a710
• https://medium.com/@ageitgey/machine-learning-is-fun-part-4-modern-face-recognition-with-deep-learning-c3cffc121d78
• https://medium.com/@ageitgey/abusing-generative-adversarial-nehttps://realpython.com/k-means-clustering-python
  rks-to-make-8-bit-pixel-art-e45d9b96cee7
• https://towardsdatascience.com/using-reinforcement-learning-to-trade-bitcoin-for-massive-profit-b69d0e8f583b
• https://towardsdatascience.com/naive-bayes-explained-108c095241eb
• https://towardsdatascience.com/basic-nlp-on-the-texts-of-harry-potter-sentiment-analysis-1b474b13651d
• https://machinelearningmastery.com/what-are-generative-adversarial-networks-gans
• https://realpython.com/k-means-clustering-python
• https://medium.com/dataseries/k-means-clustering-explained-visually-in-5-minutes-b900cc69d175
• https://joshualoong.com/2018/07/03/Topic-Modelling-Song-Lyrics-An-Exploration-in-Unsupervised-Text-Analytics/
• https://opencv-python-tutroals.readthedocs.io/en/latest/py_tutorials/py_tutorials.html
• https://towardsdatascience.com/using-nlp-to-identify-redditors-who-control-multiple-accounts-837483c8b782

• https://cheatography.com/albertx/cheat-sheets/openssl/
• https://devhints.io/curl
• http://cs.lewisu.edu/~klumpra/camssem2015/nmapcheatsheet1.pdf
• https://highon.coffee/blog/nmap-cheat-sheet/
• https://www.cyberciti.biz/howto/question/general/compress-file-unix-linux-cheat-sheet.php
• https://tmuxcheatsheet.com/
• http://web.mit.edu/hackl/www/lab/turkshop/slides/regex-cheatsheet.pdf
• http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet
• https://www.aelius.com/njh/subnet_sheet.html
• https://medium.com/hacker-toolbelt/wireshark-filters-cheat-sheet-eacdc438969c
• https://packetlife.net/media/library/13/Wireshark_Display_Filters.pdf
• https://pequalsnp-team.github.io/cheatsheet/steganography-101
• https://codeyarns.com/2016/01/22/wget-cheatsheet/
• https://cheatsheet.dennyzhang.com/cheatsheet-ssh-a4
• https://gto76.github.io/linux-cheatsheet/
• https://digital-forensics.sans.org/media/reverse-engineering-malicious-code-tips.pdf
• https://cheatsheetseries.owasp.org/assets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet_SSRF_Bible.pdf

• https://www.openpgp.org/
• https://digitalguardian.com/blog/what-pgp-encryption-defining-and-outlining-uses-pgp-encryption
• https://cs.nju.edu.cn/daihp/ns_course/04HaipengDai_SymmetricCrypto_2.pdf
• https://www.educause.edu/focus-areas-and-initiatives/policy-and-security/cybersecurity-program/resources/information-security-guide/toolkits/encryption-101
• https://idafchev.github.io/crypto/2017/04/13/crypto_part1.html
• https://simpleaswater.com/cryptography/
• http://pi.math.cornell.edu/~morris/135/Bacon.pdf
• http://practicalcryptography.com/ciphers/caesar-cipher
• https://www.boxentriq.com/code-breaking/caesar-cipher
• https://www.boxentriq.com/code-breaking/vigenere-cipher
• https://pages.mtu.edu/~shene/NSF-4/Tutorial/VIG/Vig-Base.html
• http://practicalcryptography.com/ciphers/simple-substitution-cipher
• https://blog.finjan.com/substitution-ciphers-a-look-at-the-origins-and-applications-of-cryptography
• https://blog.logsign.com/how-does-xor-cipher-work
• https://stackoverflow.com/questions/2029426/what-is-xor-encryption
• https://ctf101.org/cryptography/what-is-xor
• https://idafchev.github.io/crypto/2017/04/13/crypto_part1.html
• https://math.stackexchange.com/questions/28955/how-to-break-xor-cipher-with-repeating-key
• https://carterbancroft.com/breaking-repeating-key-xor-programmatically/
• https://stackoverflow.com/questions/4078902/cracking-short-rsa-keys
• https://gist.github.com/Neo23x0/6af876ee72b51676c82a2db8d2cd3639
• https://www.techrepublic.com/article/how-to-sign-a-file-on-linux-with-gpg
• https://web.mit.edu/kerberos
• https://asecuritysite.com/encryption/rsa12_2

• https://resources.malwarebytes.com/files/2020/04/200407-MWB-COVID-White-Paper_Final.pdf
• https://threatconnect.com/blog/using-fancy-bear-ssl-certificate-information-to-identify-their-infrastructure
• https://www.crowdstrike.com/blog/who-is-fancy-bear
• https://content.fireeye.com/apt-41/rpt-apt41
• https://threatpost.com/equation-apt-group-attack-platform-a-study-in-stealth/111550
• https://securelist.com/equation-the-death-star-of-malware-galaxy/68750
• https://us-cert.cisa.gov/sites/default/files/publications/JAR_16-20296A_GRIZZLY%20STEPPE-2016-1229.pdf
• http://www.robertmlee.org/critiques-of-the-dhsfbis-grizzly-steppe-report
• https://unit42.paloaltonetworks.com/ironnetinjector
• https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/solarwinds-sunburst-sending-data
• https://research.nccgroup.com/2020/11/18/ta505-a-brief-history-of-their-time

• Modlishka. Reverse Proxy – https://github.com/drk1wi/Modlishka
• Evilginx2 MITM phishing – https://github.com/kgretzky/evilginx2
• HiddenEye – https://github.com/DarkSecDevelopers/HiddenEye

• Mitaka A Browser Extension For OSINT Search – https://github.com/ninoseki/mitaka
• DarkScrape OSINT Tool For Scraping Dark Websites – https://github.com/itsmehacker/DarkScrape
• Sherlock Find Usernames Across Social Networks – https://github.com/sherlock-project/sherlock
• OSINT-SPY Search using OSINT – https://github.com/SharadKumar97/OSINT-SPY
• SpiderFoot OSINT Tool – https://github.com/smicallef/spiderfoot
• KillShot A Penetration Framework – https://github.com/bahaabdelwahed/killshot
• Ethereum recon and exploitation tool – https://github.com/cleanunicorn/theo
• Find breached emails, databases, pastes – https://github.com/Ekultek/WhatBreach
• Xray – A Tool For Recon, Mapping And OSINT Gathering – https://github.com/evilsocket/xray
• OSINT framework – https://osintframework.com/
• Discover – https://github.com/leebaird/discover
• ReconCobra – https://github.com/haroonawanofficial/ReconCobra
• plot a Twitter user’s activity onto a map – http://geosocialfootprint.com/
• View DNS – https://viewdns.info/
• Twitter trend map – https://www.trendsmap.com/

• https://docs.microsoft.com/en-us/windows/wsl/install-win10
• https://docs.microsoft.com/en-us/windows/wsl/faq
• https://blogs.windows.com/windowsdeveloper/2016/07/22/fun-with-the-windows-subsystem-for-linux/
• https://wiki.ubuntu.com/WSL
• https://github.com/sirredbeard/Awesome-WSL

• fireELF – Fileless Linux Malware Framework – https://github.com/rek7/fireELF
• Ustealer – Ubuntu Stealer, Steal Ubuntu Information – https://github.com/atmoner/Ustealer
• BYOB (Build Your Own Botnet) – https://github.com/malwaredllc/byob
• UBoat – HTTP Botnet Project – https://github.com/Souhardya/Uboat

• Posion tap – https://samy.pl/poisontap/
• Rubber ducky on steroids – https://github.com/whid-injector/WHID
• PI hole – https://github.com/pi-hole/pi-hole
• Homemade LAN turtle – https://github.com/CuPcakeN1njA/Int3rcept0r
• Rasp pi AI Security camera – https://medium.com/berrynet/diy-your-ai-home-security-camera-with-raspberry-pi-and-open-source-software-10d4364df20f
• https://hakin9.org/pi-sniffer-is-a-wi-fi-sniffer-built-on-the-raspberry-pi-zero-w

• Bitcoin – https://www.bitcoin.com/
• Monero – https://www.getmonero.org/
• Zcash – https://z.cash/
• Ethereum – https://ethereum.org
• RavenCoin – https://ravencoin.org
• DogeCoin – https://dogecoin.com
• TurtleCoin – https://turtlecoin.lol
• LiteCoin – https://litecoin.org
• BitcoinCash – https://bitcoincash.org
• Dash – https://www.dash.org
• Stellar – https://www.stellar.org
• Mining – https://www.investopedia.com/tech/how-does-bitcoin-mining-work/
• 51% attack – https://github.com/cburchert/shitcoin\
• Play with blockchain – https://github.com/DutchGraa/crackcoin
• Monero Info – https://www.monero.how/monero-infographic
• Simulated Blockchains for Machine Learning Traceability and Transaction Values in the Monero – https://arxiv.org/abs/2001.03937
• How Blockchain works – http://blockchain.mit.edu/how-blockchain-works
• http://list.zju.edu.cn/kaibu/netsec/lec04-blockchain.ppt
• https://www.exablue.de/en/blog/2020-06-11-malware-on-the-blockchain.html
• https://cryptofacilities.zendesk.com/hc/en-us/articles/115002807834-Calculation-of-profit-and-loss
• https://github.com/citp/BlockSci
• https://bitcointalk.org/index.php?topic=5141594.0
• https://medium.com/@philipshen13/monero-part-1-key-concepts-3671186016c6
• https://blockchain.unica.it/projects/blockchain-analytics
• https://youtu.be/cjbHqvr4ffo – How Does Monero Work?
• https://bitcoin.stackexchange.com/questions/59955/how-do-i-calculate-the-profit-of-the-value-of-my-bitcoin
• https://reserve.org
• https://foam.space
• https://dad.one
• https://getravencoin.org/ravencoin-asset-token
• https://hackernoon.com/what-are-stellar-assets-79b3145b5c7f
• https://tronblack.medium.com/ravencoin-proof-of-authenticity-4a0d325d5347

• https://moneroaddress.org
• https://bitcoinpaperwallet.com
• https://turtlecoin.lol/wallet
• https://stellarpaperwallet.com
• https://walletgenerator.net

• https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-115.pdf
• https://csrc.nist.gov/publications/detail/sp/800-82/rev-2/final
• https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
• https://csrc.nist.gov/publications/detail/sp/800-94/final
• https://www.nist.gov/risk-management

• Tor’s web site – https://www.torproject.org
• Dark web sites – https://dark.fail/#Philosophy
• How tor works – https://jordan-wright.com/blog/2015/02/28/how-tor-works-part-one

• Wallet Explorer – https://www.walletexplorer.com
• C-Hound – https://www.c-hound.ai
• BlockChain – https://www.blockchain.com
• BlockChair – https://blockchair.com
• Blockchain Analysis – https://Blockstream.info
• https://oxt.me
• https://matbea.net
• https://sochain.com

• https://www.tecmint.com/things-to-do-after-minimal-rhel-centos-7-installation
• https://doc.lagout.org/operating%20system%20/linux/Foundations%20of%20CentOS%20Linux.pdf

NOTE: The ones with * after the links are ones that are vetted. If you use your uc email and tell them your a cyber student, they wil mostly likely give you access.

• Hybrid analysis – https://www.hybrid-analysis.com
• VirusShare – https://virusshare.com*
• VirusTotal – https://www.virustotal.com

• https://threatmap.checkpoint.com
• https://cybermap.kaspersky.com
• https://www.fireeye.com/cyber-map/threat-map.html
• https://threatmap.fortiguard.com
• https://map.lookingglasscyber.com

• shuffleDNS is a wrapper around massdns – https://github.com/projectdiscovery/shuffledns
• Fast web fuzzer written in Go – https://github.com/ffuf/ffuf
• bruteforce for AWS s3 buckets – https://github.com/nahamsec/lazys3
• MassDNS subdomain enumeration – https://github.com/blechschmidt/massdns
• Fenrir Simple Bash IOC Scanner – https://github.com/Neo23x0/Fenrir
• Slurp S3 Bucket Enumerator – https://github.com/hehnope/slurp
• RapidScan Web Scanner – https://github.com/skavngr/rapidscan
• black box WordPress security – https://github.com/wpscanteam/wpscan
• ALT DNS – DNS recon – https://github.com/infosec-au/altdns
• Sn1per automated scanner – https://github.com/1N3/Sn1per
• Httpgrep – Scans HTTP Servers To Find Given Strings In URIs – https://github.com/noptrix/httpgrep
• https://github.com/aboul3la/Sublist3r
• https://github.com/maurosoria/dirsearch
• https://github.com/guelfoweb/knock
• https://github.com/nahamsec/lazyrecon
• https://cirt.net/Nikto2
• https://github.com/yanxiu0614/subdomain3
• https://github.com/swisskyrepo/SSRFmap

• Trasxss automated XSS – https://github.com/M4cs/traxss
• XSpear Powerfull XSS Scanning And Parameter Analysis Tool – https://github.com/hahwul/XSpear
• XSSCon: Simple XSS Scanner tool – https://github.com/menkrep1337/XSSCon
• Corsy – CORS Misconfiguration Scanner – https://github.com/s0md3v/Corsy
• https://fsec404.github.io/blog/HTTP-parameter-pollution/
• https://telekomsecurity.github.io/2020/05/smuggling-http-headers-through-reverse-proxies.html
• https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn
• https://www.rapid7.com/fundamentals/web-application-vulnerabilities

• https://shkspr.mobi/blog/2018/12/twitter-bug-bounty
• https://www.reddit.com/r/bugbounty/comments/983odf/how_to_become_a_bug_bounty_hunter
• https://portswigger.net/daily-swig/bug-bounty-radar-the-latest-bug-bounty-programs-for-march-2020
• https://medium.com/@muff1n/how-to-become-a-bug-bounty-hunter-dffce2bb333c
• https://samcurry.net/abusing-http-path-normalization-and-cache-poisoning-to-steal-rocket-league-accounts
• https://0xsha.gitbook.io/bug-bounties-five-weeks-to-your-first-bug
• https://medium.com/@secureITmania/how-i-exploit-the-json-csrf-with-method-override-technique-71c0a9a7f3b0
• https://bugs.xdavidhu.me/google/2020/03/08/the-unexpected-google-wide-domain-check-bypass
• https://blog.intigriti.com/2020/02/24/twitter-recap-1-bug-bounty-tips-by-the-intigriti-community/#tools_5
• https://bugbountyguide.com/
• https://www.hackerone.com/blog/100-hacking-tools-and-resources
• https://hackerone.com/reports/867952
• https://keenlab.tencent.com/en/2020/01/02/exploiting-wifi-stack-on-tesla-model-s
• https://research.securitum.com/xss-in-amp4email-dom-clobbering
• https://medium.com/@vignesh4303/collection-of-bug-bounty-tip-will-be-updated-daily-605911cfa248
• https://medium.com/bugbountywriteup/bug-bounty-hunting-methodology-toolkit-tips-tricks-blogs-ef6542301c65
• https://pentester.land/list-of-bug-bounty-writeups.html
• https://github.com/devanshbatham/Awesome-Bugbounty-Writeups
• https://www.bugcrowd.com/blog/how-to-find-idor-insecure-direct-object-reference-vulnerabilities-for-large-bounty-rewards
• https://medium.com/@win3zz/how-i-made-31500-by-submitting-a-bug-to-facebook-d31bb046e204
• https://bhavukjain.com/blog/2020/05/30/zeroday-signin-with-apple
• https://medium.com/@zonduu/idor-in-session-cookie-leading-to-mass-account-takeover-d815ff3732d5
• https://www.bad5ect0r.sh/index.php/2020/05/17/stored-xss-password-disclosure
• https://github.com/pry0cc/axiom
• https://challenge.intigriti.io/
• https://opnsec.com/2020/05/dom-xss-in-gmail-with-a-little-help-from-chrome
• https://hethical.io/stealing-the-trello-token-by-abusing-a-cross-iframe-xss-on-the-butler-plugin
• https://samcurry.net/abusing-http-path-normalization-and-cache-poisoning-to-steal-rocket-league-accounts
• http://blog.oath.ninja/basic-bug-bounty-faq
• https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters
• https://0xsha.gitbook.io/bug-bounties-five-weeks-to-your-first-bug
• https://portswigger.net/research/bypassing-csp-with-policy-injection
• https://www.bugcrowd.com/resources/webinars/api-security-testing-for-hackers
• https://samcurry.net/hacking-starbucks
• https://exploitway.com/github-dorks-for-penetration-testing
• https://medium.com/@sainttobs/csrf-token-bypasss-a-tale-of-my-2k-bug-ff7f51166ea1
• https://shahmeeramir.com/methods-to-bypass-csrf-protection-on-a-web-application-3198093f6599
• https://research.securitum.com/what-is-the-csrf-cross-site-request-forgery-vulnerability
• https://www.errno.fr/Attacking_source_repositories
• https://www.hackerone.com/blog-How-To-Server-Side-Request-Forgery-SSRF
• https://secapps.com/tutorials/security-testing-beyond-the-edge
• https://medium.com/bugbountywriteup/the-1-000-worth-cookie-6cf48af08e08
• https://www.bugcrowd.com/blog/how-to-find-idor-insecure-direct-object-reference-vulnerabilities-for-large-bounty-rewards
• https://medium.com/@the.bilal.rizwan/graphql-common-vulnerabilities-how-to-exploit-them-464f9fdce696
• https://medium.com/@nyomanpradipta120/ssti-in-flask-jinja2-20b068fdaeee
• https://hackernoon.com/how-to-find-internal-subdomains-yql-yahoo-and-bug-bounty-d7730b374d77

• BleepingComputer – https://bleepingcomputers.com
• The Hacker News – https://thehackernews.com
• ThreatPost – https://threatpost.com
• SecureList – https://securelist.com
• DarkReading – https://www.darkreading.com
• Krebs On Security – https://krebsonsecurity.com
• Sucuri – https://blog.sucuri.net
• Unit42 – https://unit42.paloaltonetworks.com
• Zdnet – https://www.zdnet.com
• HackRead – https://www.hackread.com
• CSO – https://www.csoonline.com
• BitDefender – https://labs.bitdefender.com
• Malwarebytes – https://blog.malwarebytes.com
• Netsec – https://reddit.com/r/netsec
• CheckPoint – https://research.checkpoint.com

• https://www.google.com/about/appsecurity/learning/xss
• https://portswigger.net/web-security/cross-site-scripting/cheat-sheet
• https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet
• https://xsses.rocks/sample-page
• https://github.com/wish-i-was/femida

• SQLMap – https://github.com/sqlmapproject/sqlmap
• jSQL Injection is a Java application – https://github.com/ron190/jsql-injection
• Blisqy – Exploit Time-based blind-SQL – https://github.com/JohnTroony/Blisqy

• https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet
• http://pentestmonkey.net/cheat-sheet/sql-injection/mysql-sql-injection-cheat-sheet
• https://www.exploit-db.com/papers/13650
• https://trustfoundry.net/bypassing-wafs-with-json-unicode-escape-sequences
• https://realpython.com/prevent-python-sql-injection
• https://bobby-tables.com
• http://www.securityidiots.com/Web-Pentest/SQL-Injection/bypass-login-using-sql-injection.html
• https://portswigger.net/web-security/sql-injection
• https://www.rapid7.com/fundamentals/sql-injection-attacks/

• https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html
• https://trustfoundry.net/cross-site-request-forgery-cheat-sheet

• https://www.exploit-db.com/google-hacking-database
• https://securitytrails.com/blog/google-hacking-techniques
• https://medium.com/infosec-adventures/google-hacking-39599373be7d

• https://codecademy.com/learn/learn-python
• https://docs.python-guide.org/intro/learning
• https://medium.com/swlh/5-free-python-courses-for-beginners-to-learn-online-e1ca90687caf
• https://docs.microsoft.com/en-us/learn/modules/intro-to-python
• https://refactoring.guru/design-patterns
• https://alysivji.github.io/simple-plugin-system.html
• https://eli.thegreenplace.net/2012/08/07/fundamental-concepts-of-plugin-infrastructures
• https://www.abhishekshukla.com/python/adventures-in-cryptography-with-python-xor-cipher
• https://docs.python.org/3/tutorial/datastructures.html
• https://docs.python.org/2/tutorial/classes.html
• https://en.ogunal.com/data-collection-with-python-on-linux-system
• https://wiki.python.org/moin/ForLoop
• https://www.digitalocean.com/community/tutorials/how-to-construct-for-loops-in-python-3
• https://www.digitalocean.com/community/tutorials/understanding-lists-in-python-3
• https://www.pitt.edu/~naraehan/python3/split_join.html
• https://medium.com/swlh/list-comprehensions-in-python-3-for-beginners-8c2b18966d93
• https://www.guidodiepen.nl/2019/02/implementing-a-simple-plugin-framework-in-python
• https://python-reference.readthedocs.io/en/latest/docs/functions/__import__.html
• https://dev.to/serhatteker/how-to-upgrade-to-python-3-7-on-ubuntu-18-04-18-10-5hab
• https://archive.org/details/comp3321 ( requested from NSA by Freedom of Information Act- python courses)
• https://www.digitalocean.com/community/tutorials/understanding-dictionaries-in-python-3
• https://www.digitalocean.com/community/tutorials/how-to-index-and-slice-strings-in-python-3
• https://realpython.com/python-data-classes
• https://realpython.com/python-f-strings
• https://deepsource.io/blog/python-walrus-operator
• https://dabeaz-course.github.io/practical-python/Notes/Contents.html

• http://rubylearning.com
• https://www.ruby-lang.org/en/documentation/quickstart
• https://ruby-doc.com/docs/ProgrammingRuby
• https://www.codecademy.com/learn/learn-ruby
• https://refactoring.guru/design-patterns
• https://github.com/arbox/machine-learning-with-ruby
• https://ruby.github.io/rake/doc/rakefile_rdoc.html
• https://medium.com/@jaeger.rob/a-simple-ruby-rakefile-for-tests-149a7b783c52
• http://sinatrarb.com
• https://thoughtbot.com/blog/lets-build-a-sinatra
• https://linuxize.com/post/how-to-install-ruby-on-ubuntu-18-04
• https://ankane.org/more-ml-gems
• https://dev.to/daviducolo/machinelearning-with-ruby-3m75

• https://www.cplusplus.com
• https://docs.microsoft.com/en-us/cpp/cpp/for-statement-cpp?view=vs-2019
• https://www.cs.bu.edu/teaching/cpp/writing-makefiles
• https://www.cs.fsu.edu/~myers/howto/g++compiling.txt
• https://en.cppreference.com/w/cpp/language/main_function
• https://www.cplusplus.com/doc/tutorial/program_structure
• https://www.guru99.com/cpp-file-read-write-open.html
• https://www.programiz.com/cpp-programming/inheritance
• https://docs.microsoft.com/en-us/cpp/cpp/main-function-command-line-args?view=msvc-160
• https://www.geeksforgeeks.org/command-line-arguments-in-c-cpp

• https://github.com/wish-i-was/femida
• https://github.com/cowrie/cowrie
• https://github.com/foospidy/HoneyPy
• https://github.com/magisterquis/sshhipot
• https://github.com/desaster/kippo
• https://github.com/andrewmichaelsmith/bluepot
• https://github.com/mushorg/conpot
• https://lwn.net/Articles/240120
• https://github.com/mhils/HoneyProxy
• https://github.com/amv42/sshd-honeypot

• https://github.com/gabemarshall/microctfs
• FaceBook CTF – https://github.com/facebook/fbctf
• https://laconicwolf.com/2018/06/11/cryptopals-challenge-5-repeating-key-xor-encryption
• https://truedigitalsecurity.com/blog/csaw-2015-crypto-500-bricks-of-gold-writeup
• https://www.tunnelsup.com/helpful-linux-commands-for-ctfs
• https://www.tildeho.me/ritsec-ctf-writeup-recover-aes-cbc-iv
• https://mikehacksthings.com/2019/11/07/my-favorite-challenge-of-the-fall-2019-hackathon
• https://mikehacksthings.com/2018/11/19/cny-hackathon-ctf-walkthrough-fall-2018-edition
• https://medium.com/@thereallulz/write-up-some-random-ctf-challenges-stego-part-1-be6e0c17fd4e
• https://underthewire.tech/
• https://gist.github.com/Neo23x0/6af876ee72b51676c82a2db8d2cd3639
• https://blog.sqreen.com/local-file-inclusions-explained/
• https://ctftime.org/writeup/19017

• https://github.com/lockedbyte/cryptovenom
• https://github.com/hellman/xortool
• https://github.com/DominicBreuker/stego-toolkit
• https://github.com/Acceis/crypto_identifier

q-lako is a service to quickly register equipments and books. q-lako is a web app that helps you to manage books and supplies purchased on Amazon.

• Retrievable information
• Requirements
• How to
  • Enter Python Virtual Environment
  • Prepare .env and .env.gpg
  • Prepare settings.ini
  • Run
  • Lint
  • Test
• Misc
  • Contributor

Get the following information on purchased books and supplies to help you register supplies.

• Product Title
• ASIN Code
• Image (url)
• URL
• Manufacturer
• Contributors
• Publication Date
• Product Group
• Registrants Name
• Default Positions
• Current Positions
• Note
• Features

• Python 3.8.4 or higher
  • Flask
• Google Cloud Platform
  • Google App Engine
• GnuPG

python3 -m venv venv
source venv/bin/activate
export ARCHFLAGS="-arch x86_64"
pip install --upgrade pip
pip install --upgrade --use-feature=2020-resolver -r requirements.txt

The reason why ARCHFLAGS needs to be specified is due to Apple’s bugs in Xcode12. It is recommended to explicitly specify the resolver options until pip version 20.3.

Write the API Key to .env and encrypt it. Keep your passphrase in a secure location like YubiKey.

1. Prepare .env

   airtable_base_id="airtable_base_id"
   airtable_api_key="airtable_api_key"
   amazon_partner_tag="amazon_partner_tag"
   amazon_access_key="amazon_access_key"
   amazon_secret_key="amazon_secret_key"

2. Encrypt .env to create .env.gpg

   gpg --symmetric --cipher-algo AES256 .env

3. Use your passphrase to decrypt .env.gpg .

   gpg --quiet --batch --decrypt --output=.env .env.gpg

[THEME-COLOR]
theme_color_blue=#4caaba
theme_color_gray=#393e46

[AIRTABLE]
airtable_table_name=q-lako

[ASSET-PROPERTY]
positions=sforzando Kawasaki,shin house,tomoya house,yusuke house
registrants=shin-sforzando,tomoya-sforzando,yusuke-sforzando

python main.py

If you start it locally, it will start in Debug mode.

1. Access to http://0.0.0.0:8888/
2. Enter keywords or ISBN/ASIN code in the search window and press the search button
3. Displays a list of items related to the keywords you have entered
4. Select any item from the list of items and press the Select button
5. The item’s details are displayed
6. Edit the contents of the item’s details form
7. Press the Register button and you will be registered with Airtable

flake8 *.py

pytest . -vv --ignore-glob="venv/**/*" --durations=0

• Chief Engineer: Yusuke Watanabe
• Product Manager: Tomoya Kashimada
• Business Owner: Shin’ichiro Suzuki